Fortinet FortiGate 100A, Руководство администратора

Страница: 160 / 374

160
01-28007-0068-20041203 Fortinet Inc.
Key chain list Router
4 Under Match, select the criteria to match.
5 Under Set, select the criteria to change.
6 Select OK.
Key chain list
RIP version 2 uses authentication keys to ensure that the routing information
exchanged between routers is reliable. For authentication to work both the sending
and receiving routers must be set to use authentication, and must be configured with
the same keys.
A key chain is a list of one or more keys and the send and receive lifetimes for each
key. Keys are used for authenticating routing packets only during the specified
lifetimes. The FortiGate unit migrates from one key to the next according to the
scheduled send and receive lifetimes. The sending and receiving routers should have
their system dates and times synchronized, but overlapping the key lifetimes ensures
that a key is always available even if there is some difference in the system times. See
“System time” on page 81 for information on setting the FortiGate system date and
time.
Figure 75: Key chain list
New key chain
Figure 76: Key chain name configuration
To add a key chain name
1 Go to Router > Router Objects > Key-chain .
2 Select Create New.
Create New Add a new key chain.
Key-chain The key chain name.
Accept Lifetime The time period in which to accept a key.
Send Lifetime The time period in which to send a key.
Start End The start and end times for the accept and send lifetimes.
The Delete, Add key-chain entry, and Edit icons.